Vulnerability Details CVE-2022-40494
NPS before v0.26.10 was discovered to contain an authentication bypass vulnerability via constantly generating and sending the Auth key and Timestamp parameters.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.068
EPSS Ranking 90.9%
CVSS Severity
CVSS v3 Score 9.8
References
Products affected by CVE-2022-40494
-
cpe:2.3:a:ehang-io:nps:0.19.0
-
cpe:2.3:a:ehang-io:nps:0.19.1
-
cpe:2.3:a:ehang-io:nps:0.19.2
-
cpe:2.3:a:ehang-io:nps:0.20.0
-
cpe:2.3:a:ehang-io:nps:0.20.1
-
cpe:2.3:a:ehang-io:nps:0.20.2
-
cpe:2.3:a:ehang-io:nps:0.21.0
-
cpe:2.3:a:ehang-io:nps:0.21.1
-
cpe:2.3:a:ehang-io:nps:0.21.2
-
cpe:2.3:a:ehang-io:nps:0.22.0
-
cpe:2.3:a:ehang-io:nps:0.22.1
-
cpe:2.3:a:ehang-io:nps:0.22.2
-
cpe:2.3:a:ehang-io:nps:0.22.3
-
cpe:2.3:a:ehang-io:nps:0.22.4
-
cpe:2.3:a:ehang-io:nps:0.22.5
-
cpe:2.3:a:ehang-io:nps:0.23.0
-
cpe:2.3:a:ehang-io:nps:0.23.1
-
cpe:2.3:a:ehang-io:nps:0.23.2
-
cpe:2.3:a:ehang-io:nps:0.24.0
-
cpe:2.3:a:ehang-io:nps:0.25.0
-
cpe:2.3:a:ehang-io:nps:0.25.1
-
cpe:2.3:a:ehang-io:nps:0.25.2
-
cpe:2.3:a:ehang-io:nps:0.25.3
-
cpe:2.3:a:ehang-io:nps:0.25.4
-
cpe:2.3:a:ehang-io:nps:0.26.0
-
cpe:2.3:a:ehang-io:nps:0.26.1
-
cpe:2.3:a:ehang-io:nps:0.26.10
-
cpe:2.3:a:ehang-io:nps:0.26.2
-
cpe:2.3:a:ehang-io:nps:0.26.3
-
cpe:2.3:a:ehang-io:nps:0.26.4
-
cpe:2.3:a:ehang-io:nps:0.26.5
-
cpe:2.3:a:ehang-io:nps:0.26.6
-
cpe:2.3:a:ehang-io:nps:0.26.7
-
cpe:2.3:a:ehang-io:nps:0.26.8
-
cpe:2.3:a:ehang-io:nps:0.26.9